Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/tOIAYVMKz6kmU9vX-fdLUEk2-7g.roa
File:                     tOIAYVMKz6kmU9vX-fdLUEk2-7g.roa (raw, json)
Hash identifier:          QLXgkKg8ADpM7iMs6jm7J0OocO1xnax5MaosgBvCo6Q=
Subject key identifier:   B4:E2:00:61:53:0A:CF:A9:26:53:DB:D7:F9:F7:4B:50:49:36:FB:B8
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       66
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/tOIAYVMKz6kmU9vX-fdLUEk2-7g.roa
Signing time:             Fri 01 Aug 2025 01:28:55 +0000
ROA not before:           Fri 01 Aug 2025 01:28:55 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     14618
IP address blocks:        2001:300:fffd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Aug  1 01:28:55 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B4E20061530ACFA92653DBD7F9F74B504936FBB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:5a:0b:de:f2:d4:ce:c2:09:54:0b:f4:b2:
                    34:a2:b0:5f:8d:11:2b:7b:37:2b:ec:b5:7a:f6:10:
                    04:02:82:09:84:b8:3b:74:85:ac:b3:57:00:41:b1:
                    74:15:e9:df:15:94:d4:e0:9c:59:ac:79:86:bc:20:
                    e8:14:69:17:e9:66:e2:7c:19:25:3d:be:47:9d:3f:
                    71:ab:51:b4:0e:6b:d3:50:f7:1b:d9:6a:e3:ca:a1:
                    f7:d9:21:83:92:61:6d:37:de:0f:ae:9e:44:5a:f4:
                    60:f7:9b:c7:75:9b:21:0a:c2:44:0b:9c:5a:9e:8b:
                    85:ee:02:bd:c2:97:f2:d9:9a:2f:ed:cb:70:3d:4c:
                    02:6f:0e:38:1d:14:56:2a:a4:34:f5:01:b0:f8:24:
                    32:a4:e8:6c:74:6e:f6:e3:0a:f6:82:6a:71:ea:da:
                    a7:0a:a0:d1:61:f1:14:a8:2d:ec:5d:b1:6e:4b:84:
                    60:d7:74:c0:4c:68:25:07:c4:4a:f3:87:93:90:06:
                    c7:a7:a4:ae:29:3b:5f:60:05:69:5e:96:23:12:46:
                    19:06:5b:29:d6:60:9e:8d:74:63:23:ab:4d:14:73:
                    ba:7d:ad:f0:ec:c1:39:02:88:53:92:93:4d:0f:aa:
                    a1:18:fc:42:22:10:04:1f:69:8e:68:a8:df:16:52:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:00:61:53:0A:CF:A9:26:53:DB:D7:F9:F7:4B:50:49:36:FB:B8
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/tOIAYVMKz6kmU9vX-fdLUEk2-7g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:13:12:e8:ab:2b:0c:92:16:c8:0e:79:5f:88:7c:f4:49:
         59:dc:95:b8:8c:ec:3e:54:83:49:bf:90:c0:a4:ff:f7:26:f2:
         ee:7f:73:5b:0d:6b:47:02:92:07:a7:ab:ac:ab:58:e9:cd:79:
         61:de:7e:5a:2e:0e:f8:61:2e:23:b1:c1:0a:64:a0:39:4e:c8:
         94:ed:2b:4b:7b:6e:5e:65:3b:ce:3c:b2:3c:f4:ac:66:77:60:
         08:55:69:2e:89:5f:37:4c:58:e0:c1:99:52:d0:28:0d:2b:9e:
         d7:e6:be:8d:a7:9b:85:5f:97:7c:bc:f8:d1:e7:90:60:24:9d:
         62:3e:12:ca:1e:27:cb:dd:75:ea:70:5a:ad:bf:2d:da:5a:eb:
         06:e6:73:aa:b9:44:20:23:18:23:dd:1c:b4:1b:20:0c:f5:c8:
         af:c4:8e:26:c2:f9:c1:6f:65:d6:3b:b1:0f:32:ea:81:12:04:
         09:05:1a:b9:d7:cb:8c:58:31:92:8e:83:8c:4e:a9:33:3d:47:
         97:a1:40:39:b2:24:5d:ae:e3:e4:e6:48:d3:d5:40:99:3a:0a:
         dc:e8:74:c2:02:16:e1:88:27:0e:38:f2:61:c1:d2:85:3f:c0:
         08:06:ff:2a:0b:e6:dc:95:8c:17:4a:6e:cc:2d:b2:ca:1d:26:
         15:cf:da:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1
QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI1MDgwMTAx
Mjg1NVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQjRFMjAwNjE1MzBBQ0ZB
OTI2NTNEQkQ3RjlGNzRCNTA0OTM2RkJCODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMCGWgve8tTOwglUC/SyNKKwX40RK3s3K+y1evYQBAKCCYS4O3SF
rLNXAEGxdBXp3xWU1OCcWax5hrwg6BRpF+lm4nwZJT2+R50/catRtA5r01D3G9lq
48qh99khg5JhbTfeD66eRFr0YPebx3WbIQrCRAucWp6Lhe4CvcKX8tmaL+3LcD1M
Am8OOB0UViqkNPUBsPgkMqTobHRu9uMK9oJqcerapwqg0WHxFKgt7F2xbkuEYNd0
wExoJQfESvOHk5AGx6ekrik7X2AFaV6WIxJGGQZbKdZgno10YyOrTRRzun2t8OzB
OQKIU5KTTQ+qoRj8QiIQBB9pjmio3xZSNW0CAwEAAaOCAiswggInMB0GA1UdDgQW
BBS04gBhUwrPqSZT29f590tQSTb7uDAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp
cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt
RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDE2L3RPSUFZVk1LejZrbVU5dlgtZmRMVUVrMi03Zy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQMA//0wDQYJKoZIhvcNAQELBQADggEBAF0rExLoqysMkhbIDnlf
iHz0SVnclbiM7D5Ug0m/kMCk//cm8u5/c1sNa0cCkgenq6yrWOnNeWHeflouDvhh
LiOxwQpkoDlOyJTtK0t7bl5lO848sjz0rGZ3YAhVaS6JXzdMWODBmVLQKA0rntfm
vo2nm4Vfl3y8+NHnkGAknWI+EsoeJ8vddepwWq2/Ldpa6wbmc6q5RCAjGCPdHLQb
IAz1yK/EjibC+cFvZdY7sQ8y6oESBAkFGrnXy4xYMZKOg4xOqTM9R5ehQDmyJF2u
4+TmSNPVQJk6CtzodMICFuGIJw448mHB0oU/wAgG/yoL5tyVjBdKbswtssodJhXP
2gk=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:26:11 2025 by rpki-client